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Manage the risks 


Protecting people and safeguarding responsibilities 
should be a governance priority for all charities. It is a 
fundamental part of operating as a charity for the public 
benefit. 


As part of fulfilling your trustee duties, whether working 
online or in person, you must take reasonable steps to 
protect from harm people who come into contact with 
your charity. 


This includes: 


e people who benefit from your charity’s work 
e staff 
e volunteers 


other people who come into contact with your charity 
through its work 


The Charity Commission will hold trustees to account if 
things go wrong and will check that trustees followed 
this guidance and the law. Trustees are expected to 
take responsibility for putting things right. 


The Commission will refer concerns to relevant 
safeguarding agencies where needed to take further 
action as it is not a nominated body with the power to 
implement safeguarding legislation. 


Trustees should promote an open and positive culture 
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and ensure all involved feel able to report concerns, 
confident that they will be heard and responded to. 


We expect all trustees to make sure their charity: 


e has appropriate policies and procedures in place, 
which are followed by all trustees, volunteers and 
beneficiaries 


e checks that people are suitable to act in their roles 


e knows how to spot and handle concerns in a full and 
open manner 


e has aclear system of referring or reporting to relevant 
agencies as soon as concerns are suspected or 
identified 

e sets out risks and how they will be managed in a risk 
register which is regularly reviewed 


e follows statutory guidance, good practice guidance 
and legislation relevant to their charity: this guidance 
links to the main sources of information 


e is quick to respond to concerns and carry out 
appropriate investigations 


e does not ignore harm or downplays failures 


e has a balanced trustee board and does not let one 
trustee dominate its work — trustees should work 
together 


e makes sure protecting people from harm is central to 
its culture 


e has enough resources, including trained 
staff/volunteers/trustees for safeguarding and 
protecting people 


e conducts periodic reviews of safeguarding policies, 
procedures and practice 


Read [NCVO’s safeguarding 
resource]https://www.ncvo.org.uk/help-and- 
guidance/safeguarding/specialist-guides/certain- 
roles/trustees/introduction/#/) for advice on how to get 
started with safeguarding. 


Read the Charity Governance Code 


(https://www.charitygovernancecode.org/en/front-page) for 
best practice advice including on safeguarding. 
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Read Bond’s ‘Good governance for safeguarding’ 
(https :/Awww.bond.org.uk/sites/default/files/resource- 


documents/good_governance_for_safequarding.pdf) for 
support on developing good practice on governance. 


If you work with children or adults at risk 


(https ://www.gov.uk/guidance/safeguarding-duties-for-charity- 
trustees#children-adults-at-risk) there are more 


safeguarding legal requirements. You must check 
whether these requirements apply to your charity. If they 
do, you must work within them. 


Types of Risks and Harm 


Harm and risks you must be alert to, whether online or 
in person, include: 


e sexual harassment, abuse and exploitation 
e criminal exploitation 


e acharity’s culture, which may allow poor behaviour 
and poor accountability 


e people abusing a position of trust they hold within a 
charity 


e bullying or harassment 
e health and safety 

e commercial exploitation 
e cyber abuse 


e discrimination on any of the grounds in the Equality 
Act 2010 


e people targeting your charity 


e data breaches, including those under General Data 
Protection Regulations (GDPR) 


e negligent treatment 

e domestic abuse 

e self-neglect 

e physical or emotional abuse 
e extremism and radicalisation 
e forced marriage 

e modern slavery 
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e human trafficking 
e female genital mutilation 


Policies, procedures and practices you 
need to have 


Your charity’s policies and procedures for protecting 
people and safeguarding should be: 


e put into practice 
e responsive to change 


e reviewed as necessary, always following a serious 
incident and at least once a year 


e available to the public 


e compliant with all relevant legislation, noting this can 
vary depending on who you work with 


Make all trustees, staff, volunteers, partners and 
beneficiaries aware of your policies. They all need to 
know how to apply them. 


In your policies make clear how you will: 


e protect people from harm 

e make sure people can raise safeguarding concerns 

e handle allegations or incidents 

e respond, including reporting to the relevant authorities 


The amount of detail in your policies depends on what 
your Charity does, where it works, whether it operates in 
person or online and the level of risk. 

Use guidance to help with your policies and procedures, 


including the links to specific sources of support on this 
page. Take expert or professional advice if you need it. 


Code of conduct 


If you have staff or volunteers you must have a clear 
code of conduct which sets out: 
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e your Charity’s culture and values 
e how people in your charity should behave 


Read the Charity Governance Code 
(https :/Awww.charitygovernancecode.org/en/front-page). 


Read NCVO’s Charity Ethical Principles 

principles) for help with policies on recognising and 
resolving ethical issues when considering your code of 
conduct. 


Other policies you need to have 
You also need to make sure your charity has: 


e suitable health and safety arrangements in place 


e first aid, fire safety and digital safety policies that 
everyone understands 


e welfare, discipline and whistleblowing policies for staff 
if you have them 


e acomplaints process for users and others with 
concerns 


Checking your charity’s policies, 
procedures and practice 


Trustees must be assured that all policies, procedures 
and practice are checked and challenged to ensure 
they’re fit for purpose. You must make sure your charity: 


e works within all relevant statutory guidance 
e keeps accurate records 


e stays aware of current affairs, trends and themes and 
how these can influence your policies and practices 

e complies with its policies and procedures, as well as 
with good practice and legislation 

e updates policies and procedures to reflect changes to 
statutory requirements, good practice and current 
issues 
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Every trustee should have clear oversight of how 
safeguarding and protecting people from harm are 
managed within their charity. This means you need to 
monitor your performance, not just using statistics, but 
with supporting information, such as qualitative reports. 
This will help you to understand common themes, 
identify risks and gaps so you can ensure they are 
addressed. 


If you change the way you work, such as working ina 
new area or in a different way, you should: 


e review your current policies and make sure they’re 
suitable 


e consider whether any extra policies are needed to 
cover any new situations or risks 


e record these discussions and decisions as part of 
your risk management procedures 


Trustees can use a number of things to help with their 
checking and assurance, including: 


e recording the risks faced by your charity and how 
these are managed 


e speaking to people in your charity and beneficiaries to 
make sure they understand how to raise concerns 
and get feedback on past experiences 


e carrying out checks on any sites your charity may 
work in and seeing any necessary paperwork 


e working with statutory agencies and partners 


e setting training plans for trustees, staff and volunteers 
on safeguarding and protecting people from harm 


e recording any potential conflicts of interest at any 
level 


e having a standing agenda item on safeguarding and 
protecting people from harm at meetings 


e reviewing a sample of past concerns to identify any 
lessons to be learnt and make sure they were 
handled appropriately 


e organising external reviews or inspections 
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Get checks on trustees, staff and volunteers 


You must make sure that trustees, staff and volunteers 
are suitable and legally able to act in their positions. 
This includes people from or working overseas. 


You may need to get: 


e criminal records checks 

e references and checks on gaps in work history 
e confirmation that staff can work in the UK 

e health checks 


Disclosure and Barring Service (DBS) — criminal 
records checks 


You should consider whether to use DBS checks as part 
of your wide range of checks on trustees, staff and 
volunteers. They should be used alongside references 
and interviews to give you a broad and informed view to 
manage the risk of abuse or harm. You should review 
what checks are needed as your charity evolves or 
individual roles change. 


Many posts are eligible for standard or enhanced level 
DBS checks, such as those working: 


e with children or adults at risk in certain circumstances 
e in accountancy/finance 

e in the legal profession 

e with animals, although in limited circumstances 


Trustees should risk assess all roles taking into account 
the working environment to determine if they are eligible 
for a check and if so, at what level. 


Always get a standard, enhanced or enhanced with 
barred list check from the DBS when a role is eligible for 
one. 


Not all roles working with children or adults at risk are 
eligible for a standard or enhanced check. You should 
get a basic check if your risk assessment determines it’s 
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appropriate. 


Find out what checks are available from the Disclosure 


applicant-criminal-record). 


Use the DBS eligibility checker 
(https :/Awww.gov.uk/government/collections/dbs-eligibility- 
guidance) and guidance leaflets 


(https ://www.gov.uk/government/publications/dbs-guidance- 
leaflets) to decide what checks to make. 


If you ask about criminal records you must have a policy 
in place that sets out a lawful basis and condition of 
processing this information, to comply with the General 
Data Protection Regulations (GDPR) 


(https ://ico.org.uk/for-organisations/gquide-to-data- 
protection/guide-to-the-general-data-protection-regulation- 
gdpr/). 


A charity that uses information from the DBS must also 
have a policy on the recruitment of ex-offenders, in 
order to comply with the DBS Code of Practice. The 
DBS has guidance 

(https ://www.gov.uk/government/publications/handling-of-dbs- 
certificate-information/handling-of-dbs-certificate-information) 
on this. 


Consider asking DBS applicants to register with the 
Update Service or consider carrying out further DBS 
checks on a regular basis. 


NACRO (https://www.nacro.org.uk/resettlement-advice- 
service/support-for-individuals/disclosing-criminal- 
records/criminal-record-checks/) has guidance on dealing 
with DBS checks and criminal record risk assessments. 
People from overseas 


It’s a different process to get checks for trustees, staff or 
volunteers from overseas. 


overseas 
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(https ://www.gov.uk/government/publications/criminal-records- 
checks-for-overseas-applicants). 


You can join the Misconduct Disclosure Scheme 
(https :/Awww.schr.info/the-misconduct-disclosure-scheme) to 
get extra checks on international staff. 


Sending workers overseas 


Where you cannot get a DBS check for someone going 
to work overseas, they may be able to get an 
International Child Protection certificate 


Automatic disqualification 


Do not appoint anyone who is disqualified as a trustee 
or to a senior manager position (at chief executive or 
finance director level). 


Guidance on disqualification and checks to make 
(https :/Awww.gov.uk/guidance/automatic-disqualification-rule- 


changes-guidance-for-charities). 


Protect volunteers and staff 


If your charity has volunteers or staff, you need to 
protect them from harm. 


Have clear policies and procedures on: 


e bullying and harassment 
e whistleblowing 


(https://www.acevo.org.uk/reports/in-plain-sight/). Section 7 
of the report explores how a bullying culture can be 
created and gives six recommendations to create safer 
systems to combat this. 


You need to have adequate insurance which covers the 
individuals and the activities involved. 
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Charities and insurance 
(https :/Awww.gov.uk/government/publications/charities-and- 
insurance-cc49). 


Safeguarding children or adults at risk 


If your charity works with children or adults at risk, either 
online or in person, you should: 


e establish appropriate safeguarding policies and 
procedures that all trustees, staff and volunteers 
follow, which fit with the policies and procedures of 
your local authority safeguarding partnership or 
safeguarding children or adults board 

e make sure all staff and volunteers receive regular 
training on child protection or working with adults at 
risk 

e appoint a safeguarding lead to work with your local 
authority safeguarding partnerships or boards and/or 
create a plan for responding to concerns overseas 

e manage concerns, complaints, whistleblowing and 
allegations relating to child protection or adults at risk 
effectively 

e have clear policies when DBS checks are required, 
how you assess the level of check needed and how 
you handle the information 


You must follow relevant legislation and guidance. 


Identify your local authority safeguarding children or 
adults partnership or board. 


They: 


e coordinate safeguarding and promote the welfare of 
children or adults at risk in the area 


e publish policies and procedures for safeguarding 
which you must follow 


You can find your local authority partnership or board 
online. 
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Safeguarding children 


Safeguarding children duties apply to any charity 
working with, or coming into contact with, anyone under 
the age of 18. 


child-protection/) and follow standards 

(https :/earning.nspcc.org.uk/research- 

resources/201 9/safeguarding-child-protection-standards) from 
the NSPCC for safeguarding children. Safeguarding 
children means to: 


e protect children from abuse and maltreatment 
e prevent harm to children’s health or development 


e ensure children grow up with the provision of safe 
and effective care 


e take action to enable all children and young people to 
have the best outcomes 


In England follow Working Together to Safeguard 
Children 2018 
(https://www.gov.uk/government/publications/working- 
together-to-safeguard-children--2) 


In Wales follow Wales Safeguarding Procedures 
(http:/www.safeguarding.wales/) 


Safeguarding adults at risk 


Safeguarding adults at risk means protecting their right 
to live in safety and free from abuse and neglect. Your 
charity may have trustees, staff, volunteers, 
beneficiaries or other connections who are classed as 
adults at risk. 


Safeguarding duties for adults at risk apply to any 
charity working with anyone aged 18 or over who: 


e has needs for care and support (whether or not the 


https://www.gov.uk/guidance/safeguarding-duties-for-charity-trustees Page 12 of 21 


Safeguarding and protecting people for charities and trustees - GOV.UK 


local authority is meeting any of those needs) and 
is experiencing, or is at risk of, abuse or neglect and 


as a result of those care and support needs is unable 
to protect themselves from either the risk of, or the 
experience of, abuse or neglect 


An adult at risk of abuse may: 


have an illness affecting their mental or physical 
health 


have a learning disability 
suffer from drug or alcohol problems 
be frail 


In England follow guidance on the Care Act 2014 
(https://www.gov.uk/government/publications/care-act- 
statutory-guidance/care-and-support-statutory-guidance) 


In Wales follow Wales Safeguarding Procedures 
(http:/www.safeguarding.wales/) 


Operating online 


Operating online carries specific safeguarding risks 
connected to protecting people from abuse and 
protecting sensitive information. You must make sure 
these are managed and reflected in your policies and 
practices. 


Content: does your charity have adequate control 
over its website and social media accounts? Who can 
post information and is all content suitable for your 
charity? 

Contact: how do people talk to each other when 
using your online services and how do you keep 
users safe? Do people need passwords to access 
services? 


Conduct: how do you monitor what people do, say 
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and share when using your services? 


You must be satisfied that your charity identifies and 
manages risks: 


e be confident volunteers, staff and trustees understand 
how to keep themselves safe online. You could use 
high privacy settings and password access to 
meetings to support this 


e be sure the online services you provide are suitable 
for your users. For example, use age restrictions and 
offer password protection to help keep people safe 

e know the services your charity uses and provides are 
safe and in line with your charity’s code of conduct 

e protect people’s personal data and follow GDPR 
legislation (https://ico.org.uk/for-organisations/guide-to- 
data-protection/guide-to-the-general-data-protection- 
regulation-gdpr/) 

e make sure you have permission to display any 
images on your website or social media accounts. 
You may need individual or parental permission 


e clearly explain how users can report online concerns 


There are further resources charities can use for 
support when working online, such as Internet Matters 
(https:/Awww.internetmatters.org/), Get Safe Online 


procedures/guidelines-for-charities/) and NSGPCC 


(https ://www.getsafeonline.org/rules-guidelines-and- 
procedures/guidelines-for-charities/). 


Working overseas 
You must: 


e be aware of different risks for staff, volunteers and 
beneficiaries who are overseas 


e have suitable reporting and monitoring processes in 
place for any work overseas 


e monitor where you work for any changes or new 
safety systems which are needed 
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Challenges of working overseas include: 


e different cultures, practices or legal systems 
e an unstable environment, like a conflict zone 
e working with many partners 


You should apply the same practices as in England and 
Wales and make sure you comply with any extra 
requirements of the other country. 


Follow The Core Humanitarian Standard on Quality and 
Accountability (https://corehumanitarianstandard.org/the- 
standard) for overseas humanitarian work and the Inter- 
Agency Standing Committee Minimum Operating 
Standards for Protection from Sexual Exploitation and 
Abuse 


(https ://interagencystandingcommittee.org/accountability- 


and-abuse/content-1) if relevant. 
You must know when to report: 


e issues 
(https://assets. publishing.service.gov.uk/government/upload 
s/system/uploads/attachment_data/file/752474/guidance_o 
n_criminal_reporting_inc_overseas.pdf) to law 


enforcement in the country you are working in 
e to police in the UK 


You can find resources online to help with working 
overseas. These include: 


e Safeguarding against Sexual Exploitation and Abuse 
and Sexual Harassment (SEAH) in the aid sector 
(https ://www.gov.uk/guidance/safequarding-against-sexual- 
exploitation-and-abuse-and-sexual-harassment-seah-in- 
the-aid-sector) 


e BOND (https:/Avww.bond.org.uk/ngo- 
support/safeguarding), the UK network for organisations 
working in international development 


e Safeguarding Resource and Support Hub 
(https ://safeguardingsupporthub.org/what-rsh) 
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Only use templates that are appropriate for your charity. 


Handle and report incidents and 
concerns 


If you have an incident or allegation of abuse you 
should: 


e handle and record it in a Secure and responsible way 


e follow your protecting people and safeguarding 
policies and procedures 


e act quickly, ensuring you stop or minimise any further 
harm or damage 


e report it to all relevant agencies and regulators when 
required 

e plan what to say to those involved with your charity 
and the media if appropriate 


e be as open and transparent as possible, so that you 
build the charity’s reputation for acting with integrity 
while protecting confidentiality appropriately 


e review what happened to understand how to stop it 
from happening again 


Use guidance on handling safeguarding allegations in a 


charity (https://;www.gov.uk/government/publications/strategy- 


for-dealing-with-safeguarding-issues-in-charities) for help on 
handling incidents and concerns. 


You should consider whether the incident or concern 
involves criminal behaviour and whether you therefore 
need to report it to the police. Follow our guidance on 


(https ://assets.publishing.service.gov.uk/government/uploads/s 
ystem/uploads/attachment_data/file/1034096/Criminal_reporti 


ng_of_safeguarding_offences_including_overseas.odt) for 
further details. 


There are other regulators that you may need to report 
or refer to, as well as Government departments where 
these are providing funding 

(https :/Awww.gov.uk/government/publications/strategy-for- 
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dealing-with-safeguarding-issues-in-charities/safequarding- 
the-role-of-other-agencies), depending on what your 
charity does. 


In some cases, you should send a serious incident 
report to the Charity Commission 

(https ://www.gov.uk/guidance/how-to-report-a-serious-incident- 
in-your-charity). 


If you work or volunteer for a charity you can also report 
it to us using our whistleblowing procedure 


(https :/Awww.gov.uk/guidance/report-serious-wrongdoing-at-a- 
charity-as-a-worker-or-volunteer). 


If you work with children or adults at risk 


Refer all safeguarding concerns with children or adults 
at risk to your local safeguarding children (LADO) or 
adult team. 


You can also refer concerns to the DBS and you must 
refer to DBS if you: 


e provide a regulated activity 
(https ://www.gov.uk/government/collections/dbs-referrals- 
guidance--2), and 

e stop someone working with children or adults at risk, 
and 

e certain criteria are met 


(https ://www.gov.uk/guidance/making-barring-referrals-to- 
the-dbs#legal-duty-to-refer-the-two-conditions-that-must-be- 


met) 


Working with or making grants to other 
organisations 


Carry out proper due diligence when you work with, or 
make grants to, any other bodies, including: 


e delivery partners 


e trading subsidiaries of the charity, including charity 
shops 
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e organisations you fund 
e connected charities 


You must make sure that any grant recipient or partner 
body is suitable. They must have appropriate 
safeguarding procedures in place. Make sure there are 
clear lines of responsibility and reporting between all 
bodies involved. 


How to carry out due diligence checks 
(https ://www.gov.uk/government/publications/charities-due- 
diligence-checks-and-monitoring-end-use-of-funds) 


Use the Department for International Development’s 
enhanced due diligence: safeguarding for external 
partners (https:/Awww.gov.uk/government/publications/dfid- 


enhanced-due-diligence-safeguarding-for-external-partners) 
for more guidance on this. 


Read our guidance on grant funding an organisation 
that isn’t a charity (https://;www.gov.uk/guidance/draft- 


guidance-grant-funding-an-organisation-that-isnt-a-charity) if 
you are considering making grants to other types of 
organisations. 


You should have a written agreement or contract that 
sets out: 


e your relationship 
e the role of each organisation 
e monitoring and reporting arrangements 


Terrorism and the Prevent duty 
All charities must prevent abuse for extremist purposes. 


Some charities, like educational charities, are ‘specified 
authorities’. They must follow guidance on the Prevent 
duty (https://www.gov.uk/government/publications/prevent- 
duty-guidance). 


Where appropriate you should also follow: 
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e Advice for schools and childcare providers 
(https ://www.gov.uk/government/uploads/system/uploads/at 
tachment_data/file/439598/prevent-duty-departmental- 
advice-v6. pdf) 

e How higher education bodies’ compliance with the 
Prevent duty is monitored 
(https ://www. officeforstudents.org.uk/advice-and- 
guidance/regulation/counter-terrorism-the-prevent-duty/) 


This must be part of your charity’s risk assessments, 
policies and procedures. 


Download infographic 


This document is a one-page summary of safeguarding 
actions for trustees. 


10 safeguarding actions for charity trustees (infographic) 


(https://assets. publishing.service.gov.uk/government/uploads/s 
ystem/uploads/attachment_data/file/756636/10_safeguarding_ 


actions_for_charity_trustees_infographic.pdf) (PDF, 122 KB, 
1 page) 


Text version of infographic 


10 actions trustee boards need to take to ensure good 
safeguarding governance 


Safeguarding should be a key governance priority for all 
charities. 


Ensure your charity has an adequate safeguarding 
policy, code of conduct and any other safeguarding 
procedures. Regularly review and update the policy and 
procedures to ensure they are fit for purpose. 


Identify possible risks, including risks to your 
beneficiaries or to anyone else connected to your 
charity and any emerging risks on the horizon. 


Consider how to improve the safeguarding culture within 
your charity. 
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Ensure that everyone involved with the charity knows 
how to recognise, respond to, report and record a 
safeguarding concern. 


Ensure people know how to raise a safeguarding 
concern. 


Regularly evaluate any safeguarding training provided, 
ensuring it is current and relevant. 


Review which posts within the charity can and must 
have a DBS check from the Disclosure and Barring 
Service. 


Have a risk assessment process in place for posts 
which do not qualify for a DBS check, but which still 
have contact with children or adults at risk. 


Periodically review your safeguarding policy and 
procedures, learning from any serious incident or ‘near 
miss’. 


If you work overseas, find out what different checks and 
due diligence you need to carry out in different 
geographical areas of operation. 


In this guidance: 


e ‘must’ means something is a legal or regulatory 
requirement or duty that trustees must comply with 


e ‘should’ means something is good practice that the 
Commission expects trustees to follow and apply to 
their charity 


Published 6 December 2017 
Last updated 1 June 2022 + show all updates 


Explore the topic 


Staff and volunteers (Aopic/running-charity/staff- 
volunteers) 


Trustee role and board (Aopic/running-charity/trustee- 
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role-board) 


Your charity's work (/topic/running-charity/charitys- 
work) 


OGL 
All content is available under the Open Government Licence 
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